Page heading

Privacy Policy

Last updated: 2 April 2026

1. Data Controller

The data controller responsible for your personal data is:

  • Flavoureak UK Ltd, trading as Quartz Store
  • Company number: 16410737
  • Registered address: 16 Clos Synod, Cardiff, CF14 2PY
  • Email: hello@quartzstore.co.uk

This policy explains how we collect, use, store, and share your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. What Personal Data We Collect

We may collect the following personal data:

  • Identity and contact details: name, email address, telephone number, delivery and fitting address.
  • Payment information: processed securely by Shopify Payments. We do not see, receive, or store your card numbers.
  • Site visit booking details: preferred date, property type, contact number, details of existing worktops.
  • VAT number: if provided by trade customers.
  • Order history: what you purchased, when, and the amount paid.
  • Communications: emails, messages, and telephone calls between you and us.
  • Website usage data: pages visited, time on site, referring website, browser type, device type. This data is collected via cookies (see our Cookie Policy).

3. Why We Collect It and Our Legal Basis

We only process your personal data where we have a lawful basis to do so:

  • Order fulfilment and fitting service (including arranging site visits, fabrication, and installation): performance of a contract with you.
  • Sending order confirmations and service updates (dispatch notifications, fitting date confirmations, delays): performance of a contract with you.
  • Arranging site visits (contacting you to book, sharing your address and telephone number with our fitting team): performance of a contract with you.
  • Responding to enquiries (questions about products, availability, or fitting): legitimate interest — it is in our reasonable business interest to respond to prospective and existing customers.
  • Marketing emails (product news, offers, promotions): consent. We only send marketing emails if you have opted in. You may unsubscribe at any time.
  • Maintaining financial records (invoices, VAT records, transaction history): legal obligation under tax legislation and HMRC requirements.
  • Improving our website (analysing traffic patterns, identifying popular pages): legitimate interest — using anonymised analytics data to improve the customer experience.

4. Who We Share Data With

We share personal data only where necessary to fulfil our obligations to you or to comply with the law:

  • Shopify: our e-commerce platform. Shopify processes your order data, account data, and website usage data on our behalf.
  • Shopify Payments: processes your payment securely. Shopify Payments is PCI DSS compliant.
  • Our fitting teams: receive your name, fitting address, telephone number, and site visit details only — the minimum necessary to carry out the installation.
  • Royal Mail or courier services: receive your name and delivery address when posting kitchen doors, accessories, or samples.
  • Google Analytics: receives anonymised website usage data (if analytics cookies are enabled).

We do not sell your personal data to third parties.

5. International Transfers

Shopify processes data in Canada and the United States. These transfers are protected by Standard Contractual Clauses approved by the UK Information Commissioner's Office, ensuring your data receives an adequate level of protection.

6. How Long We Keep Data

  • Order data and financial records: 6 years from the date of the transaction (as required by HMRC).
  • Marketing consent records: until you withdraw consent.
  • General enquiries: 2 years from your last communication.
  • Website analytics data: 26 months (Google Analytics default retention period).

After these periods, your data is securely deleted or anonymised.

7. Your Rights

Under the UK GDPR, you have the following rights:

  • Right of access: request a copy of the personal data we hold about you.
  • Right to rectification: request correction of inaccurate or incomplete data.
  • Right to erasure: request deletion of your data where there is no compelling reason for us to continue processing it.
  • Right to restriction: request that we limit processing of your data in certain circumstances.
  • Right to data portability: request your data in a structured, commonly used, machine-readable format.
  • Right to object: object to processing based on legitimate interest or for direct marketing purposes.
  • Right to withdraw consent: where processing is based on your consent, you may withdraw it at any time.

To exercise any of these rights, email hello@quartzstore.co.uk. We will respond within one month.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

8. Automated Decision-Making

We do not use automated decision-making or profiling in relation to your personal data.

9. Children

Our products and services are not directed at children. We do not knowingly collect personal data from anyone under the age of 16. If we become aware that we have collected data from a child under 16, we will delete it promptly.

10. Cookies

Our website uses cookies. For full details of the cookies we use and how to manage them, please see our Cookie Policy.

11. Changes to This Policy

We may update this policy from time to time. The "last updated" date at the top of this page indicates when the most recent changes were made. We encourage you to check this page periodically.

12. Contact Us

If you have any questions about this policy or how we handle your data: